Search found 10 matches

by Chad Beattie
Thu Jul 29, 2004 2:34 pm
Forum: General discussions
Topic: Serious Security Issue In PHPMyFAQ 1.4
Replies: 32
Views: 47009

Thorsten wrote:Hi,

this bug is fixed now.

bye
Thorsten
The image upload bug? If so, would you be able to send me a version to try out for the heck of it. If not, no big deal. I was just curious to play around with it.

Thanks
by Chad Beattie
Thu Jul 29, 2004 12:54 am
Forum: General discussions
Topic: Serious Security Issue In PHPMyFAQ 1.4
Replies: 32
Views: 47009

Safemode off here too, but still having the problem.

Chad: If you keep clicking on the Image Manager, it eventually comes up? Even if I click over and over, I never get anything but a blank box...

Yes, that is what was happening with 1.4.0a. If I browsed to other sections of the admin area and ...
by Chad Beattie
Wed Jul 28, 2004 6:00 pm
Forum: General discussions
Topic: Amazon Wishlist - English version?
Replies: 1
Views: 4292

Amazon Wishlist - English version?

Hello,

I was looking at the Amazon wishlist but I can only read English. Is there a way on the Amazon site to where I can translate it? I don't imagine I could manage to go through the process without knowing what it was asking ;)

Thanks
by Chad Beattie
Wed Jul 28, 2004 5:42 pm
Forum: General discussions
Topic: Serious Security Issue In PHPMyFAQ 1.4
Replies: 32
Views: 47009

AndrewB wrote:I should have said.. "If you have safemode off and you get this message, then it is a bug" ;)
I have safe mode off and get the error also.
by Chad Beattie
Wed Jul 28, 2004 4:25 pm
Forum: General discussions
Topic: Serious Security Issue In PHPMyFAQ 1.4
Replies: 32
Views: 47009

Hi,

I sent you an e-mail.

bye
Thorsten

I installed it and it seems to be working fine now in both IE and Firefox. I no longer see the script errors in IE. The image manager now has options to upload images although I am getting "Not authorized" when attempting to upload. I imagine it is ...
by Chad Beattie
Wed Jul 28, 2004 3:16 pm
Forum: General discussions
Topic: Serious Security Issue In PHPMyFAQ 1.4
Replies: 32
Views: 47009

Hi,

I could send you the pre-release of phpMyFAQ 1.4.1 RC1 with lots of bugfixes.

bye
Thorsten

That sounds good. Just to let you know, I setup the install on a different server and am seeing the same issues. IE reports a script error and doesn't always load the WYSIWYG interface. Firefox always ...
by Chad Beattie
Wed Jul 28, 2004 2:54 pm
Forum: General discussions
Topic: Serious Security Issue In PHPMyFAQ 1.4
Replies: 32
Views: 47009

Hi,

do you have access to the errorlog from Apache?

bye
Thorsten

Yes, I do. The only errors I am seeing right now are when I create a new entry:

[Wed Jul 28 09:00:31 2004] [error] [client x.x.x.x] File does not exist: /usr/local/www/data/phpmyfaq/admin/editor/plugins/InsertWords/lang/en.js ...
by Chad Beattie
Wed Jul 28, 2004 1:57 pm
Forum: General discussions
Topic: Serious Security Issue In PHPMyFAQ 1.4
Replies: 32
Views: 47009

Hmm, this is very odd. After clicking on the image button in the WYSIWYG a few times, it started to pop up. But, after the image manager came up, the WYSIWYG went away and doesn't show up anymore. Maybe there is something with java detection? Just guessing as I am not for sure how it all works yet ...
by Chad Beattie
Wed Jul 28, 2004 1:40 pm
Forum: General discussions
Topic: Serious Security Issue In PHPMyFAQ 1.4
Replies: 32
Views: 47009

I added


error_reporting(E_ALL);


to manager.php after the first <?php

Also, I made the changes for the possible bug fixes. My code in manager.php looks like this. I added the output for $_REQUEST just so I can see what the values are set to.


/*if ($_REQUEST["uin"]) {
$uin = $_REQUEST["uin ...
by Chad Beattie
Tue Jul 27, 2004 6:56 pm
Forum: General discussions
Topic: Serious Security Issue In PHPMyFAQ 1.4
Replies: 32
Views: 47009

I am also having this same problem. You can test it out here:

http://216.161.65.120/phpmyfaq/

I will PM you the admin login info too. At least in my case, when submitting a new content via the normal interface, I don't see the WYSIWYG but I do when using the admin interface. Is this normal? I have ...